This explains what CLUB does with your information when you join the club, and what you can do about it.
1. Who's responsible for your information
CLUB is run by Ta Very Much Ltd, company number 15580316, of 313 Crookesmoor Rd, S10 1BD. We decide what the club collects and what it's used for, so we're the data controller, and we're who to contact first.
Contact us at ben@pigeon.coffee.
We run the club using Flub, which handles your information on our instructions so the club can work — issuing your pass, sending the messages, and keeping the record of what you've claimed. You can also raise anything about your information with Flub at support@useflub.com, and we'll sort it out between us.
2. What we collect
Different clubs ask for different things. Here's everything this club may collect, and what each one is for. If we don't ask you for it, we don't hold it.
- Your mobile number — to send you your pass, and the offers you unlock.
- Your email address — for your membership, your receipts if you pay, and offers and news if you've agreed to them.
- Your name — so we can address you properly.
- Your date of birth — only to send you something on your birthday, and to check any age limit on an offer.
- Your postal address — only to send you what your membership includes.
- What you claim, and when — the offers you unlock and redeem, and the date and time you do it.
- Your visits — when you check in at the venue.
- Your pass — which device it's installed on, so it stays up to date.
- Messages we send you — whether they were delivered, and whether you opened or clicked an email.
- Your payments, if your membership is a paid one — what you've paid and when. Your card details go straight to Stripe; we never see or hold them.
We don't buy information about you from anyone else, and we don't build a profile of you from anything beyond the above.
3. Why we use it, and on what basis
- Running your membership — your pass, your offers, your record. Necessary to provide the membership you asked for.
- Taking payment and keeping accounting records, if you pay — our contract with you, and our legal obligations.
- Sending you offers and news — your consent, which you can withdraw at any time.
- Keeping the club fair — spotting duplicate or fraudulent claims. Our legitimate interest in running the scheme honestly.
- Keeping the service secure and working — our legitimate interest in a safe, functioning service.
Where we're relying on a legitimate interest, you can object — see section 7.
4. Who else sees it
We share your information with the companies that make the club work. Each handles it only to do the job we've given them:
- Flub — runs the club software.
- Apple and Google — deliver and update the pass in your phone's wallet.
- Twilio — sends the text messages.
- Amazon Web Services and Postmark — send the emails.
- Stripe — takes payments and holds the card details, if your membership is a paid one.
- Cloudflare and Laravel Cloud — host and serve the club's pages.
We don't sell your information, and we don't share it for anyone else's marketing. We'll disclose it if the law requires it, or to establish or defend a legal claim.
Some of these companies are outside the UK, mainly in the United States. Where that happens, the transfer is covered by UK adequacy regulations or by standard contractual clauses with the UK addendum.
5. Messages, and how to stop them
About your membership — your pass, changes to your account, and your receipts if you pay. We have to be able to send these while you're a member, so they can't be turned off. They're never marketing.
Offers and news — you can stop these whenever you like. Use the unsubscribe link at the bottom of any marketing email we send you: that stops the emails and the texts. Or email ben@pigeon.coffee and ask, and we'll do it.
Stopping marketing doesn't cancel your membership — your pass keeps working and your offers stay yours.
6. How long we keep it
We keep your information for as long as you're a member of CLUB.
If you leave, or we remove you, we delete or anonymise what we no longer need. How long we hold the rest depends on what it is: we keep a minimal record of your membership for as long as we might need it to deal with a query or a dispute, and if you've paid us, we keep payment and accounting records for six years because tax law requires it.
You can ask us to delete your information sooner — see section 7.
7. Your rights
You have the right to:
- see the information we hold about you;
- correct it if it's wrong;
- delete it;
- restrict or object to how we use it;
- take it with you in a portable format;
- withdraw your consent to marketing at any time — section 5 is the quickest way.
To use any of these, email us at ben@pigeon.coffee, or Flub at support@useflub.com — either works, and we'll deal with it between us. We'll respond within one month. Some of these we handle by hand rather than with a button on your pass, so please give us a few days.
If you're not happy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk, or on 0303 123 1113. We'd rather you came to us first so we can put it right.
8. Keeping it safe
Your information is held on encrypted servers, and access is limited to the people who need it to run the club. Payments are handled entirely by Stripe.
No system is perfectly secure. If something happens to your information that puts you at risk, we'll tell you and we'll tell the ICO, as the law requires.
9. Children
You need to be 16 or over to join CLUB. We don't knowingly collect information about anyone younger. If you think we have, email ben@pigeon.coffee and we'll delete it.
10. Changes
If we change this policy we'll update the date at the top. If a change materially affects you, we'll tell you directly rather than leave you to find it here.